When entering various forms/fields in the REST endpoints via other ArcGIS Server or ArcGIS Portal the ability to store for autocomplete values is flagged as a serious potential compromise.
If the browser is used in a shared computing environment where more than one person may use the browser then "autocomplete" values may be submitted by an unauthorized user.